Are There Any Sample LDIF To INSERT Or DELETE LOGONIDs?
search cancel

Are There Any Sample LDIF To INSERT Or DELETE LOGONIDs?

book

Article ID: 55114

calendar_today

Updated On:

Products

ACF2 ACF2 - DB2 Option ACF2 for zVM ACF2 - z/OS ACF2 - MISC 24X7 High-Availability Manager for DB2 for z/OS Batch Processor Compile QQF Data Compressor for DB2 for z/OS CA Unicenter NSM RC/Update for DB2 for z/OS DB2 TOOLS- DATABASE MISC PanApt PanAudit

Issue/Introduction

Description

Are there any samples to insert or delete logonids by issuing an ldapadd or ldapdelete command with an LDIF?

Solution

ldapadd command

Assume that we use an ldapadd command like this:

ldapadd -D acf2lid=admuser,acf2admingrp=lids,host=xxxx,o=yyy,c=zz -w admpswd -h hostname -f ADD.ldif -x

Sample LDIF for an ldapadd command to insert logonid,which would be specified on the ldapadd command above as ADD.ldif file:

  • Insert two logonids...TESTID1 who has READALL privilege and TESTID2 who has ACCOUNT privilege:

    dn:acf2lid=testid1,acf2admingrp=lids,host=xxxx,o=yyy,c=zz
    FullName:testid number 1
    userPassword:testpas1
    ReadAccessToAll:Y
    dn:acf2lid=testid2,acf2admingrp=lids,host=xxxx,o=yyy,c=zz
    FullName:testid number 2
    userPassword:testpas2
    ACF2AccountPriv:Y

    The equivalent commands under CA ACF2 are:

    INS TESTID1 NAME(TESTID NUMBER 1) PASS(TESTPAS1) READALL
    INS TESTID2 NAME(TESTID NUMBER 2) PASS(TESTPAS2) ACCOUNT

    Note: CA LDAP Server provides UFNs(User Friendly Names) for each field on the LOGONID in the CA ACF2 database.

    Example:
    ReadAccessToAll is the UFN for field READALL in the CA ACF2 database. The list for UFNs can be found in the Chapter 3 'CA ACF2_RA Backend' in CA LDAP Server for CA ACF2 Administrator Guide.

ldapdelete command

Assume that we use an ldapdelete command like this:

ldapdelete -D acf2lid=admuser,acf2admingrp=lids,host=xxxx,o=yyy,c=zz -w admpswd -h hostname -f DELETE.ldif -x

Sample LDIF for an ldapdelete command to delete logonid,which would be specified on the ldapdelete command above as DELETE.ldif file:

  • Delete two logonids...TESTID1 and TESTID2:

    acf2lid=testid1,acf2admingrp=lids,host=xxxx,o=yyy,c=zz
    acf2lid=testid2,acf2admingrp=lids,host=xxxx,o=yyy,c=zz

    The equivalent commands under CA ACF2 are:

    DEL TESTID1
    DEL TESTID2

Environment

Release:
Component: ACFLDP